Qnap QTS Command Injection (CVE-2020-2490)

If exploited, the command injection vulnerability could allow remote attackers to execute arbitrary commands. This issue affects: QNAP Systems Inc. QTS versions prior to 4.4.3.1421 on build 20200907. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot...

CVE-2020-2490

Summary: CVE-2020-2490 is a remote command-injection vulnerability in QNAP QTS prior to 4.4.3.1421 (build 20200907). Affected product/version: QNAP Systems QTS, versions before 4.4.3.1421 on build 20200907. Impact (as stated): If exploited, allows remote attackers to execute arbitrary commands wi...